Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
File: 960EaCOkpawZj0BdOYQ0moNlwWE.mft (raw, json)
Hash identifier: J7sgkp7frPwNxB+8o2onP8SeREKChiNiQqhs9Qg8xjg=
Subject key identifier: B4:80:9B:FD:E6:72:A8:C4:34:4D:0B:91:DE:63:B2:7B:F8:73:DA:7D
Authority key identifier: F7:AD:04:68:23:A4:A5:AC:19:8F:40:5D:39:84:34:9A:83:65:C1:61
Certificate issuer: /CN=f7ad046823a4a5ac198f405d3984349a8365c161
Certificate serial: 01A10FCCB34F41C17B166CF30729B002F867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
Manifest number: 0106
Signing time: Tue 06 Oct 2026 06:00:35 +0000
Manifest this update: Tue 06 Oct 2026 06:00:35 +0000
Manifest next update: Wed 07 Oct 2026 06:00:35 +0000
Files and hashes: 1: 960EaCOkpawZj0BdOYQ0moNlwWE.crl (hash: MCj8q/FHLCFMiCPh4zy/WWi8UNey+vrPfuFJN74YKsA=)
2: bG3fcprpXz4Us6cwgJ9PkaUxgXQ.roa (hash: FrGHJvzVXHIulkPnWqo3gyts46hg4UH5BktvMTcKuRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cc:b3:4f:41:c1:7b:16:6c:f3:07:29:b0:02:f8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ad046823a4a5ac198f405d3984349a8365c161
Validity
Not Before: Oct 6 06:00:35 2026 GMT
Not After : Oct 7 06:00:35 2026 GMT
Subject: CN=b4809bfde672a8c4344d0b91de63b27bf873da7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:da:80:a9:13:22:5a:44:ba:5f:b2:7a:8e:
18:99:63:2a:17:51:70:fc:f2:2d:a9:12:1f:89:8d:
6f:a3:c8:35:64:e6:1c:48:ed:c5:57:43:1b:e7:78:
58:b4:6b:49:21:3c:e4:e5:27:e1:89:a4:60:f3:92:
ca:8a:e9:09:b1:03:2a:82:38:42:18:af:8f:94:67:
6b:dd:32:e7:e0:fc:15:ef:7f:5f:98:b3:20:a1:2e:
20:14:2f:df:b0:18:2a:2c:0f:c5:f7:d7:c9:9a:57:
37:c7:c4:8c:56:c1:ce:be:b8:80:92:3e:ed:34:51:
94:f0:21:7c:62:f9:28:7f:8b:8c:67:46:8f:75:56:
b4:8d:a5:ab:f1:e5:79:c3:f8:51:ea:c2:c4:45:ff:
a7:91:af:12:d8:3a:a3:44:2d:18:73:bc:26:54:80:
9c:e1:59:03:c9:b6:33:11:4d:12:e5:3b:68:4b:e5:
a5:d3:89:4b:97:8e:e5:01:b5:40:e6:ad:0b:db:c4:
d6:b3:07:d6:36:fe:a9:ac:e4:2c:74:d2:e6:b0:2e:
e1:fa:4d:0e:cc:27:35:17:77:d3:ea:fd:bc:c5:2a:
92:65:a8:e9:a6:db:cd:f0:6c:a7:f0:70:c4:00:82:
73:6c:6d:a9:9d:55:4b:9b:fa:b3:4b:e2:49:87:71:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:80:9B:FD:E6:72:A8:C4:34:4D:0B:91:DE:63:B2:7B:F8:73:DA:7D
X509v3 Authority Key Identifier:
keyid:F7:AD:04:68:23:A4:A5:AC:19:8F:40:5D:39:84:34:9A:83:65:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/960EaCOkpawZj0BdOYQ0moNlwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/960EaCOkpawZj0BdOYQ0moNlwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a5:e9:00:04:ac:ca:d4:db:8c:6c:2a:aa:9a:0c:af:bb:d5:
c3:b0:3a:f2:4b:2a:85:4f:3c:7f:59:35:02:54:b8:35:68:dc:
67:bf:8c:6e:14:d7:b8:6b:c9:68:df:2c:da:4b:ef:25:6a:f0:
63:d4:7e:6b:04:bc:38:ac:cd:88:9c:b5:fc:20:87:7c:a8:e0:
a8:04:e5:47:17:93:3c:97:24:89:b5:92:4f:bd:7e:87:7c:c5:
32:37:c9:fe:95:64:c1:a9:ed:9d:e4:32:ca:11:89:6e:bb:26:
3b:f4:52:ab:08:3a:90:91:fe:ea:3e:12:6a:bc:b1:23:a5:fd:
85:ae:12:14:e2:70:a4:bd:95:87:3d:41:21:22:14:f7:71:81:
42:85:1b:b8:30:1f:f4:ee:32:fd:b8:3c:70:06:ec:b5:26:8d:
27:85:5c:e6:dc:b6:34:21:11:c4:c7:6a:61:1d:f9:20:92:0d:
04:cb:d6:29:3b:4d:b6:fd:c3:5f:68:e9:66:8b:ae:95:32:b8:
ef:a0:5f:17:1e:ef:1e:03:de:14:24:74:3b:67:4d:25:90:f3:
0f:45:43:ad:1d:0f:99:14:2a:5f:08:af:bc:a5:42:0a:4b:65:
f1:24:33:41:19:b9:8b:15:09:34:90:7c:88:ac:da:7e:93:34:
49:af:e2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:29:04 2026 by rpki-client